The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes Python logic to execute standard git commands (such as git diff and git shortstat) via the subprocess module. These operations are strictly limited to analyzing code changes and repository statistics for the purpose of generating PR documentation and do not involve arbitrary shell execution.
[DATA_EXFILTRATION]: The tool processes local repository metadata, including commit messages and file diffs, to populate PR templates. No access to sensitive configuration files (e.g., .env, .aws/credentials) or attempts to transmit data to external servers were identified.
[PROMPT_INJECTION]: The skill analyzes untrusted data from git diffs and commit messages. While there are no explicit boundary markers used to isolate this content, the risk is limited to indirect prompt injection affecting the quality of the generated PR summary, which is a known and manageable characteristic of automated documentation tools.

comprehensive-review-pr-enhance